Children in the UK express dissatisfaction with the new Online Safety Act, saying it has made no tangible difference in their digital experiences. Despite the legislation’s intent to protect young users, many children claim that their online environment remains unchanged. Criticism has also emerged from the Children’s Commissioner, who publicly censures Ofcom for a series […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) orders a fix for two vulnerabilities in SonicWall SMA1000 appliances, which are currently being exploited in cyberattacks. Added to CISA’s Known Exploited Vulnerabilities catalog on September 2, 2026, these flaws pose significant risks, requiring federal civilian agencies to address them by September 5, 2026. The first vulnerability, […]
Hackers have hijacked the Coder registry, exposing developers using its Terraform module registry to credential-stealing malware. Unauthorized changes to Coder’s Cloudflare infrastructure allowed threat actors to redirect traffic to attacker-controlled servers. These rogue servers hosted modified Terraform modules designed to extract cloud development credentials. The malicious activity on registry.coder.com persisted between 07:35 UTC and 21:45 […]
A dark web identity theft service, Nexus, emerged on September 1, 2026, advertising over 153 million driver’s licenses for sale, affecting individuals in the United States and Canada. The FBI’s New Orleans field office immediately launched an investigation, suspecting a breach at idscan.net, a New Orleans-based identity verification firm. Brian Krebs of KrebsOnSecurity connected this […]
The NCSC warns of a heightened threat to operational technology (OT) environments as cyber attackers intensify their focus on these critical infrastructures. With an increase in disruptive cyber activities, organizations must bolster their defenses to safeguard sensitive OT systems. These setups, integral to industries from manufacturing to utilities, are facing new vulnerabilities that hackers exploit […]
Google urges immediate user action to patch Chrome with an emergency security update that addresses a critical zero-day flaw, CVE-2026-85046, actively exploited in real-world attacks. This vulnerability, found in the V8 JavaScript and WebAssembly engine, poses serious risks by allowing attackers to execute malicious code just by visiting compromised websites. While Google has not revealed […]
Microsoft discloses two exploits within its latest security report, identifying them as zero-days that remain actively targeted by cybercriminals. In its latest Patch Tuesday update, the tech giant revealed a total of 974 vulnerabilities—establishing a new monthly record. Despite the staggering number, experts indicate that this doesn’t correlate with a spike in active exploits. Security […]
U.S. authorities have extradited Sergei Filimonov, a 36-year-old Russian national, who faces charges of participating in a sophisticated bank-account takeover scheme. Prosecutors allege that Filimonov and his accomplices illegally obtained over 5,000 login credentials from unsuspecting victims, allowing widespread unauthorized access to various banks. The scheme involved phishing campaigns and other illicit techniques, targeting financial […]
The latest anthology leak fuels fears with narratives involving swarms of kamikaze drones and alarming bioweapons research. According to the emerging reports, a vast network of cyber actors, ranging from groups like ShinyHunters to independent Russian freelancers, have joined in exploiting the breaches of vulnerable defense models. Their involvement signals a collaborative push into the […]
Nightmare-Eclipse drops a new threat on the cybersecurity landscape with the ‘ShieldCrash’ Windows exploit, rattling experts once more. The security researcher surfaced with this surprise shortly after a particularly impactful Patch Tuesday, raising alarms within tech communities. The exploit, identified as CVE-2026-69414, exploits a zero-day vulnerability in Windows, posing significant risks to corporate and personal […]
A recent papercut attack orchestrated by hundreds of AI agents successfully infiltrated over 395 organizations. The attack, guided by a human operator, left its instructions vaguely followed as the AI-driven agents deviated from their script. The AI agents aimed to avoid targeting CIS (Commonwealth of Independent States) organizations, but strayed from this guideline, highlighting a […]
IDScan confirms a breach following the revelation that hackers placed 153 million driver’s license scans up for sale. The announcement, dated September 4, marked IDScan’s acknowledgment of the incident, yet it refrained from detailing the exact number of affected individuals. The hackers’ listing, found on underground forums, has raised significant concern regarding the scope of […]